This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json)
Hash identifier: aoGot4E12Lvs9VXWLG1ceanmxyy3iKQo39rxUwJ90UY=
Subject key identifier: 4D:26:93:60:CC:E4:63:D3:41:76:07:73:51:35:82:5B:FA:8C:22:4B
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial: 032E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
Manifest number: 032A
Signing time: Thu 04 Dec 2025 23:27:23 +0000
Manifest this update: Thu 04 Dec 2025 23:27:23 +0000
Manifest next update: Thu 11 Dec 2025 23:27:23 +0000
Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: QhR9WKNCuNq+b/KFKi4TNCQsEYA1Xz2lFZi8/tEoUXc=)
2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: X6/WL2Fb6NLT/TbbuE2SKgksYwkJEDYC9NLRzws0bWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Validity
Not Before: Dec 4 23:27:23 2025 GMT
Not After : Dec 11 23:27:23 2025 GMT
Subject: CN=693218db-976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:52:aa:4f:a2:cc:4e:3d:96:1d:43:39:c8:
a7:e4:aa:57:ff:fd:98:5a:5c:9c:5e:c6:74:ce:d3:
87:76:c8:05:7e:cc:af:79:ef:8d:12:53:ba:de:a0:
71:66:57:66:4c:a0:e8:e9:a1:bf:a6:4b:52:03:7e:
02:52:b9:53:11:8a:5d:17:56:9f:7d:19:c8:5a:45:
f5:f9:9c:66:7f:8c:4e:cc:f2:c5:a6:2c:ae:b1:3b:
54:4e:30:eb:1b:af:09:27:69:c6:89:c6:82:1d:35:
82:2f:61:0d:c8:97:27:67:6c:3b:a4:55:5d:dc:b1:
c2:86:d6:40:f5:55:36:c8:35:1c:8f:b2:91:f2:b1:
63:52:0f:e4:7a:0f:66:87:09:f7:03:39:f5:41:6e:
ca:62:84:67:55:8b:ed:70:fe:bc:49:ee:0f:2f:a6:
8b:3e:44:1f:35:36:ed:de:bd:80:c3:90:dd:25:88:
d2:d6:45:b8:9a:ea:b3:8c:a0:cd:de:8c:8f:21:a2:
25:3e:44:df:2b:ab:0d:5f:3e:54:78:71:59:59:2e:
e0:48:b4:06:ed:1d:cc:31:93:c2:00:35:92:0b:77:
33:b3:a8:54:87:3d:12:ac:d9:1a:26:3d:1b:5f:a6:
98:55:72:c9:4d:88:fb:b4:42:ed:b8:25:fa:1d:28:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:93:60:CC:E4:63:D3:41:76:07:73:51:35:82:5B:FA:8C:22:4B
X509v3 Authority Key Identifier:
keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:50:b1:b9:24:98:be:c6:4d:6d:4a:93:34:78:c0:54:1d:e8:
22:44:7a:d7:47:fb:90:a7:a0:82:b1:74:f2:98:d1:df:d8:ac:
56:8d:a3:b8:0d:ae:a4:27:c8:16:21:29:9f:1f:f7:97:14:78:
e7:50:0b:ee:19:4b:0f:67:96:a3:ed:93:90:b9:ab:cf:19:42:
c8:0a:1d:ce:21:f3:b0:92:f5:ce:49:9f:22:af:c5:d4:6f:79:
f1:e1:a9:84:e3:0f:c4:df:1c:06:fe:69:5f:3f:72:9f:b5:4d:
6a:88:f7:b3:ed:b4:0d:74:90:83:f1:3c:b3:e5:c2:0c:19:33:
c0:75:04:d3:75:57:cd:3c:e1:13:f5:bb:0a:ac:2c:62:09:bf:
9b:04:2b:90:e1:cc:5a:4b:b4:a9:ce:ae:db:b5:b9:72:62:50:
99:4e:6a:f0:df:f4:19:2c:db:51:fb:10:42:61:c4:79:7e:dc:
a5:27:9f:26:ad:de:d8:d2:95:90:7f:29:a0:5b:2d:64:1e:8a:
57:ce:78:5d:4e:1e:bb:6d:da:89:47:fa:df:dd:20:24:c3:ed:
29:38:bf:d8:d8:df:c8:ef:19:f7:53:5e:c1:65:a6:a4:4e:f8:
ae:54:94:aa:77:db:0b:79:5d:30:aa:e4:a4:52:71:07:35:93:
5c:af:3b:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ5RTYxMTAvBgNVBAUTKDgxNUJGMEVFMjBBNURDQkEzMDU3QzNEMzVCNThFQzE0
NzcyRThGRUYwHhcNMjUxMjA0MjMyNzIzWhcNMjUxMjExMjMyNzIzWjAYMRYwFAYD
VQQDEw02OTMyMThkYi05NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3MBSqk+izE49lh1DOcin5KpX//2YWlycXsZ0ztOHdsgFfsyvee+NElO63qBx
ZldmTKDo6aG/pktSA34CUrlTEYpdF1affRnIWkX1+Zxmf4xOzPLFpiyusTtUTjDr
G68JJ2nGicaCHTWCL2ENyJcnZ2w7pFVd3LHChtZA9VU2yDUcj7KR8rFjUg/keg9m
hwn3Azn1QW7KYoRnVYvtcP68Se4PL6aLPkQfNTbt3r2Aw5DdJYjS1kW4muqzjKDN
3oyPIaIlPkTfK6sNXz5UeHFZWS7gSLQG7R3MMZPCADWSC3czs6hUhz0SrNkaJj0b
X6aYVXLJTYj7tELtuCX6HSjPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0mk2DM
5GPTQXYHc1E1glv6jCJLMB8GA1UdIwQYMBaAFIFb8O4gpdy6MFfD01tY7BR3Lo/v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFNi8zMjQ2RkU2RUVE
NDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNMb3dWOFBUVzFqc0ZIY3Vq
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dWdnc3aUNsM0xvd1Y4UFRXMWpzRkhjdWotOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDlFNi8zMjQ2RkU2RUVENDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNM
b3dWOFBUVzFqc0ZIY3VqLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHULG5JJi+xk1tSpM0eMBUHegiRHrXR/uQp6CCsXTymNHf2KxWjaO4
Da6kJ8gWISmfH/eXFHjnUAvuGUsPZ5aj7ZOQuavPGULICh3OIfOwkvXOSZ8ir8XU
b3nx4amE4w/E3xwG/mlfP3KftU1qiPez7bQNdJCD8Tyz5cIMGTPAdQTTdVfNPOET
9bsKrCxiCb+bBCuQ4cxaS7Spzq7btblyYlCZTmrw3/QZLNtR+xBCYcR5ftylJ58m
rd7Y0pWQfymgWy1kHopXznhdTh67bdqJR/rf3SAkw+0pOL/Y2N/I7xn3U17BZaak
TviuVJSqd9sLeV0wquSkUnEHNZNcrztc
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:20:46 2025 by rpki-client